1 /*
2 * Copyright 2020-2023 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include "internal/deprecated.h"
11
12 #include <openssl/crypto.h>
13 #include <openssl/evp.h>
14 #include <openssl/core_dispatch.h>
15 #include <openssl/core_names.h>
16 #include <openssl/params.h>
17 #include <openssl/err.h>
18 #include <openssl/proverr.h>
19 #include "crypto/sm2.h"
20 #include "prov/provider_ctx.h"
21 #include "prov/implementations.h"
22 #include "prov/providercommon.h"
23 #include "prov/provider_util.h"
24
25 static OSSL_FUNC_asym_cipher_newctx_fn sm2_newctx;
26 static OSSL_FUNC_asym_cipher_encrypt_init_fn sm2_init;
27 static OSSL_FUNC_asym_cipher_encrypt_fn sm2_asym_encrypt;
28 static OSSL_FUNC_asym_cipher_decrypt_init_fn sm2_init;
29 static OSSL_FUNC_asym_cipher_decrypt_fn sm2_asym_decrypt;
30 static OSSL_FUNC_asym_cipher_freectx_fn sm2_freectx;
31 static OSSL_FUNC_asym_cipher_dupctx_fn sm2_dupctx;
32 static OSSL_FUNC_asym_cipher_get_ctx_params_fn sm2_get_ctx_params;
33 static OSSL_FUNC_asym_cipher_gettable_ctx_params_fn sm2_gettable_ctx_params;
34 static OSSL_FUNC_asym_cipher_set_ctx_params_fn sm2_set_ctx_params;
35 static OSSL_FUNC_asym_cipher_settable_ctx_params_fn sm2_settable_ctx_params;
36
37 /*
38 * What's passed as an actual key is defined by the KEYMGMT interface.
39 * We happen to know that our KEYMGMT simply passes EC_KEY structures, so
40 * we use that here too.
41 */
42
43 typedef struct {
44 OSSL_LIB_CTX *libctx;
45 EC_KEY *key;
46 PROV_DIGEST md;
47 } PROV_SM2_CTX;
48
sm2_newctx(void * provctx)49 static void *sm2_newctx(void *provctx)
50 {
51 PROV_SM2_CTX *psm2ctx = OPENSSL_zalloc(sizeof(PROV_SM2_CTX));
52
53 if (psm2ctx == NULL)
54 return NULL;
55 psm2ctx->libctx = PROV_LIBCTX_OF(provctx);
56
57 return psm2ctx;
58 }
59
sm2_init(void * vpsm2ctx,void * vkey,const OSSL_PARAM params[])60 static int sm2_init(void *vpsm2ctx, void *vkey, const OSSL_PARAM params[])
61 {
62 PROV_SM2_CTX *psm2ctx = (PROV_SM2_CTX *)vpsm2ctx;
63
64 if (psm2ctx == NULL || vkey == NULL || !EC_KEY_up_ref(vkey))
65 return 0;
66 EC_KEY_free(psm2ctx->key);
67 psm2ctx->key = vkey;
68
69 return sm2_set_ctx_params(psm2ctx, params);
70 }
71
sm2_get_md(PROV_SM2_CTX * psm2ctx)72 static const EVP_MD *sm2_get_md(PROV_SM2_CTX *psm2ctx)
73 {
74 const EVP_MD *md = ossl_prov_digest_md(&psm2ctx->md);
75
76 if (md == NULL)
77 md = ossl_prov_digest_fetch(&psm2ctx->md, psm2ctx->libctx, "SM3", NULL);
78
79 return md;
80 }
81
sm2_asym_encrypt(void * vpsm2ctx,unsigned char * out,size_t * outlen,size_t outsize,const unsigned char * in,size_t inlen)82 static int sm2_asym_encrypt(void *vpsm2ctx, unsigned char *out, size_t *outlen,
83 size_t outsize, const unsigned char *in,
84 size_t inlen)
85 {
86 PROV_SM2_CTX *psm2ctx = (PROV_SM2_CTX *)vpsm2ctx;
87 const EVP_MD *md = sm2_get_md(psm2ctx);
88
89 if (md == NULL)
90 return 0;
91
92 if (out == NULL) {
93 if (!ossl_sm2_ciphertext_size(psm2ctx->key, md, inlen, outlen)) {
94 ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY);
95 return 0;
96 }
97 return 1;
98 }
99
100 return ossl_sm2_encrypt(psm2ctx->key, md, in, inlen, out, outlen);
101 }
102
sm2_asym_decrypt(void * vpsm2ctx,unsigned char * out,size_t * outlen,size_t outsize,const unsigned char * in,size_t inlen)103 static int sm2_asym_decrypt(void *vpsm2ctx, unsigned char *out, size_t *outlen,
104 size_t outsize, const unsigned char *in,
105 size_t inlen)
106 {
107 PROV_SM2_CTX *psm2ctx = (PROV_SM2_CTX *)vpsm2ctx;
108 const EVP_MD *md = sm2_get_md(psm2ctx);
109
110 if (md == NULL)
111 return 0;
112
113 if (out == NULL) {
114 if (!ossl_sm2_plaintext_size(in, inlen, outlen))
115 return 0;
116 return 1;
117 }
118
119 return ossl_sm2_decrypt(psm2ctx->key, md, in, inlen, out, outlen);
120 }
121
sm2_freectx(void * vpsm2ctx)122 static void sm2_freectx(void *vpsm2ctx)
123 {
124 PROV_SM2_CTX *psm2ctx = (PROV_SM2_CTX *)vpsm2ctx;
125
126 EC_KEY_free(psm2ctx->key);
127 ossl_prov_digest_reset(&psm2ctx->md);
128
129 OPENSSL_free(psm2ctx);
130 }
131
sm2_dupctx(void * vpsm2ctx)132 static void *sm2_dupctx(void *vpsm2ctx)
133 {
134 PROV_SM2_CTX *srcctx = (PROV_SM2_CTX *)vpsm2ctx;
135 PROV_SM2_CTX *dstctx;
136
137 dstctx = OPENSSL_zalloc(sizeof(*srcctx));
138 if (dstctx == NULL)
139 return NULL;
140
141 *dstctx = *srcctx;
142 memset(&dstctx->md, 0, sizeof(dstctx->md));
143
144 if (dstctx->key != NULL && !EC_KEY_up_ref(dstctx->key)) {
145 OPENSSL_free(dstctx);
146 return NULL;
147 }
148
149 if (!ossl_prov_digest_copy(&dstctx->md, &srcctx->md)) {
150 sm2_freectx(dstctx);
151 return NULL;
152 }
153
154 return dstctx;
155 }
156
sm2_get_ctx_params(void * vpsm2ctx,OSSL_PARAM * params)157 static int sm2_get_ctx_params(void *vpsm2ctx, OSSL_PARAM *params)
158 {
159 PROV_SM2_CTX *psm2ctx = (PROV_SM2_CTX *)vpsm2ctx;
160 OSSL_PARAM *p;
161
162 if (vpsm2ctx == NULL)
163 return 0;
164
165 p = OSSL_PARAM_locate(params, OSSL_ASYM_CIPHER_PARAM_DIGEST);
166 if (p != NULL) {
167 const EVP_MD *md = ossl_prov_digest_md(&psm2ctx->md);
168
169 if (!OSSL_PARAM_set_utf8_string(p, md == NULL ? ""
170 : EVP_MD_get0_name(md)))
171 return 0;
172 }
173
174 return 1;
175 }
176
177 static const OSSL_PARAM known_gettable_ctx_params[] = {
178 OSSL_PARAM_utf8_string(OSSL_ASYM_CIPHER_PARAM_DIGEST, NULL, 0),
179 OSSL_PARAM_END
180 };
181
sm2_gettable_ctx_params(ossl_unused void * vpsm2ctx,ossl_unused void * provctx)182 static const OSSL_PARAM *sm2_gettable_ctx_params(ossl_unused void *vpsm2ctx,
183 ossl_unused void *provctx)
184 {
185 return known_gettable_ctx_params;
186 }
187
sm2_set_ctx_params(void * vpsm2ctx,const OSSL_PARAM params[])188 static int sm2_set_ctx_params(void *vpsm2ctx, const OSSL_PARAM params[])
189 {
190 PROV_SM2_CTX *psm2ctx = (PROV_SM2_CTX *)vpsm2ctx;
191
192 if (psm2ctx == NULL)
193 return 0;
194 if (ossl_param_is_empty(params))
195 return 1;
196
197 if (!ossl_prov_digest_load_from_params(&psm2ctx->md, params,
198 psm2ctx->libctx))
199 return 0;
200
201 return 1;
202 }
203
204 static const OSSL_PARAM known_settable_ctx_params[] = {
205 OSSL_PARAM_utf8_string(OSSL_ASYM_CIPHER_PARAM_DIGEST, NULL, 0),
206 OSSL_PARAM_utf8_string(OSSL_ASYM_CIPHER_PARAM_PROPERTIES, NULL, 0),
207 OSSL_PARAM_utf8_string(OSSL_ASYM_CIPHER_PARAM_ENGINE, NULL, 0),
208 OSSL_PARAM_END
209 };
210
sm2_settable_ctx_params(ossl_unused void * vpsm2ctx,ossl_unused void * provctx)211 static const OSSL_PARAM *sm2_settable_ctx_params(ossl_unused void *vpsm2ctx,
212 ossl_unused void *provctx)
213 {
214 return known_settable_ctx_params;
215 }
216
217 const OSSL_DISPATCH ossl_sm2_asym_cipher_functions[] = {
218 { OSSL_FUNC_ASYM_CIPHER_NEWCTX, (void (*)(void))sm2_newctx },
219 { OSSL_FUNC_ASYM_CIPHER_ENCRYPT_INIT, (void (*)(void))sm2_init },
220 { OSSL_FUNC_ASYM_CIPHER_ENCRYPT, (void (*)(void))sm2_asym_encrypt },
221 { OSSL_FUNC_ASYM_CIPHER_DECRYPT_INIT, (void (*)(void))sm2_init },
222 { OSSL_FUNC_ASYM_CIPHER_DECRYPT, (void (*)(void))sm2_asym_decrypt },
223 { OSSL_FUNC_ASYM_CIPHER_FREECTX, (void (*)(void))sm2_freectx },
224 { OSSL_FUNC_ASYM_CIPHER_DUPCTX, (void (*)(void))sm2_dupctx },
225 { OSSL_FUNC_ASYM_CIPHER_GET_CTX_PARAMS,
226 (void (*)(void))sm2_get_ctx_params },
227 { OSSL_FUNC_ASYM_CIPHER_GETTABLE_CTX_PARAMS,
228 (void (*)(void))sm2_gettable_ctx_params },
229 { OSSL_FUNC_ASYM_CIPHER_SET_CTX_PARAMS,
230 (void (*)(void))sm2_set_ctx_params },
231 { OSSL_FUNC_ASYM_CIPHER_SETTABLE_CTX_PARAMS,
232 (void (*)(void))sm2_settable_ctx_params },
233 OSSL_DISPATCH_END
234 };
235
